Description
Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.
Remediation
References
Related Vulnerabilities
WordPress Plugin FireStorm Professional Real Estate Multiple SQL Injection Vulnerabilities (2.05.01)
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65904)
MediaWiki Missing Authentication for Critical Function Vulnerability (CVE-2019-12468)
Squid Improper Input Validation Vulnerability (CVE-2013-1839)